Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FE24FA2844811EEB0A4DB85C4F9AE02.roa
File: 5FE24FA2844811EEB0A4DB85C4F9AE02.roa (raw, json)
Hash identifier: sW7QV3YCpmrjVFouz1RldtryQZpmmrPZzl5s3nl2EV0=
Subject key identifier: 85:D6:9A:9A:01:B4:A8:E4:BF:5C:A5:73:C2:34:DF:E6:91:86:BD:F8
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 354C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FE24FA2844811EEB0A4DB85C4F9AE02.roa
Signing time: Wed 13 Mar 2024 12:38:17 +0000
ROA not before: Wed 13 Mar 2024 12:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 23
111.88.144.0/23 maxlen: 24
111.88.146.0/24 maxlen: 24
111.88.150.0/23 maxlen: 24
111.88.152.0/23 maxlen: 24
111.88.156.0/22 maxlen: 24
111.88.164.0/22 maxlen: 23
111.88.166.0/23 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 21
115.186.64.0/21 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/20 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.12.0/22 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 11:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13644 (0x354c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 13 12:38:17 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f19e39-d898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:f8:8e:fc:9f:4b:d9:5d:42:fb:43:73:81:
ad:8f:2b:46:ea:b0:0a:bd:9d:9c:d7:d0:5d:62:0e:
7d:2b:6b:35:35:30:d8:6f:5c:58:70:2c:97:7f:40:
7c:3c:7e:58:bc:6b:06:1a:71:85:34:af:b1:5c:a6:
05:d0:24:0e:14:56:2b:cf:3a:91:5b:58:c9:4b:4b:
0e:64:a6:f0:8b:93:4b:ba:d8:01:2a:92:25:e7:53:
f8:22:c7:b9:af:2e:06:93:d8:62:e6:09:f2:31:1d:
a1:a7:b1:93:30:42:18:10:f2:bb:25:fd:16:fb:71:
54:08:a7:58:d3:e3:e7:08:8b:a0:3b:94:94:5e:a2:
89:3b:74:2a:38:0d:bb:ac:f3:21:ab:6d:c3:f4:96:
dd:83:3b:a9:99:d4:6d:f1:6a:5a:aa:54:7e:93:4f:
fe:fa:c0:99:ca:55:9e:71:11:d4:9c:ef:08:f0:ba:
9d:d3:46:ff:3b:20:9f:cc:ec:e6:15:21:25:cd:2a:
6d:00:e4:3d:d9:42:70:1f:e1:3e:f2:b9:20:7d:80:
3b:82:b0:77:02:ec:c0:78:d8:a3:e2:8f:ca:bc:3b:
35:3e:8e:0b:21:92:33:28:cb:1f:89:21:7a:ae:53:
d1:e8:05:4d:01:6e:23:26:6f:a3:4c:54:81:66:1b:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:9A:9A:01:B4:A8:E4:BF:5C:A5:73:C2:34:DF:E6:91:86:BD:F8
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FE24FA2844811EEB0A4DB85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/22
111.88.233.0-111.88.234.255
111.88.240.0/24
111.88.251.0-111.88.254.255
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.11.0-117.102.15.255
117.102.29.0-117.102.31.255
203.81.216.0/24
203.81.219.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ff:75:3b:3a:a0:41:52:d3:d2:97:9e:f0:f4:7b:98:ba:f5:
7d:d0:8a:ea:b9:38:b5:f5:36:01:ce:05:6a:83:30:58:f2:b8:
e8:84:ff:d9:2f:d4:08:2e:bb:fd:55:26:b5:2b:92:f7:8f:6f:
52:b9:cf:c2:26:cd:0a:df:cb:b8:62:77:97:b7:68:81:62:70:
44:c9:75:52:e2:13:fc:a4:29:b2:cf:33:3f:fc:79:4c:24:99:
a2:a9:de:30:cb:36:15:90:17:8c:e0:9b:b8:23:05:e0:1f:f2:
ab:6b:8b:8a:11:a7:23:72:74:75:84:3c:ce:00:fc:eb:a5:0c:
b8:6b:41:f5:0f:e1:a1:f8:81:14:d4:03:96:e1:14:f7:8f:d1:
a4:96:31:b4:72:91:08:49:bf:7a:0f:62:b2:63:4e:bb:5c:37:
69:f0:6c:21:54:b8:39:41:21:d3:fa:49:5e:d7:0e:76:7a:f6:
db:ba:a2:d1:6e:bb:d7:56:b9:e1:e9:0e:85:5a:e1:8c:4a:d3:
89:34:68:f0:59:07:4e:57:52:56:31:86:49:6c:da:97:b1:f9:
77:6c:81:dc:74:58:34:58:1c:88:05:f5:dd:22:77:00:43:a6:
5a:60:7d:0a:8b:24:d9:26:17:9f:b6:ea:ba:92:c6:ad:b1:9f:
81:94:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org